General

  • Target

    78c52a39474127785dd6ddebefd64fe5_JaffaCakes118

  • Size

    1.8MB

  • MD5

    78c52a39474127785dd6ddebefd64fe5

  • SHA1

    0fddb358c5d956586c08cedcf1d18fe0d1ff370d

  • SHA256

    c182d5239eccb1739dcca0cbbe28b3236f0ebca4dc6c98bd3465b4227eeab4a7

  • SHA512

    cf2ab0e1e822b548f06deba3894503e92960c32facf0cb5b8bd18f462bb7db4d7ef04d64ce8d8928c2808eb423395cab8b24b1dc7e44d4ed24bef1b65ccc61c4

  • SSDEEP

    24576:eszJUeRESKzAQ3vrC4wF23LjcRjfjvmL3A1d4dgb3ldw7TELV5i+9r5IoyMIX61q:12eREHAovn3LjcRLjvmwwfwLatrK1L8f

Score
7/10

Malware Config

Signatures

  • VMProtect packed file 1 IoCs

    Detects executables packed with VMProtect commercial packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • 78c52a39474127785dd6ddebefd64fe5_JaffaCakes118
    .rar
  • tcssczs/173绿色软件.url
  • tcssczs/173软件下载.txt
  • tcssczs/EThread.fne
    .dll windows:4 windows x86 arch:x86

    62e5db1ba371409d5b2d25cef78e9ce3


    Headers

    Imports

    Exports

    Sections

  • tcssczs/PBShell.fne
    .dll windows:1 windows x86 arch:x86

    2027b75fdbfe67caf12adc5d5f0ddf0c


    Headers

    Imports

    Exports

    Sections

  • tcssczs/com.run
    .dll windows:4 windows x86 arch:x86

    5867874cfed7eebbf10ef059dbad6450


    Headers

    Imports

    Exports

    Sections

  • tcssczs/eDB.fne
    .dll windows:4 windows x86 arch:x86

    7653d067fe85da664e5762a6c78ade23


    Headers

    Imports

    Exports

    Sections

  • tcssczs/iext.fnr
    .dll windows:4 windows x86 arch:x86

    0e9f86f83fb5d6813b58d277e663a96f


    Headers

    Imports

    Exports

    Sections

  • tcssczs/iext2.fne
    .dll windows:4 windows x86 arch:x86

    7286ba50216c69a37eae6422826c4a4f


    Headers

    Imports

    Exports

    Sections

  • tcssczs/iext3.fne
    .dll windows:4 windows x86 arch:x86

    e16cd9ed3233064536d99cf6794183fb


    Headers

    Imports

    Exports

    Sections

  • tcssczs/internet.fne
    .dll windows:4 windows x86 arch:x86

    a0ac47f87c51f127efa0e1a85fead828


    Headers

    Imports

    Exports

    Sections

  • tcssczs/krnln.fnr
    .dll windows:4 windows x86 arch:x86

    26785cfb88e49b3769998dfe0b2db937


    Headers

    Imports

    Exports

    Sections

  • tcssczs/shdocvw.dll
    .dll regsvr32 windows:5 windows x86 arch:x86

    6a7c629739ff264cef710604b9d77a86


    Headers

    Imports

    Exports

    Sections

  • tcssczs/ttssc.mdb
  • tcssczs/天彩时时彩全能助手.exe
    .exe windows:4 windows x86 arch:x86

    1853246822ecfa04081e94feb339a08e


    Headers

    Imports

    Exports

    Sections